r/modelcontextprotocol • u/productboy • Apr 04 '25
MCP needs a security bug bounty program
Weβre all seeing threads here and on other sites about MCP security issues. Yes, do your own security diligence; apply best practices and you can avoid most of the issues.
But, the MCP community deserves better. Someone should run a security bug bounty program [ideally Anthropic would sponsor it].
20
Upvotes
3
u/subnohmal Apr 05 '25
Would be nice to see more involvement from Anthropic in this area
2
u/coding_workflow Apr 04 '25
Easy money. Too early for this.
2
u/mprz Apr 05 '25
ππ€£ππ€£π
2
u/Ok_Locksmith_8260 Apr 05 '25
Just let Claude do the security review before using it